(i.e. downward ‘would’ counterfactual). Freedom restrictions occur when an organisation engages in control and oversight over employees’ work practices related to collection, storage, dissemination and use of personal information (Alge et al. 2006; Lowry and Moody 2014).